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FEDERAL BUREAU OF INVESTIGATION 



Precedence : ROUTINE 

■To: General Counsel Attn: 



Date: 00/00/201_ 

Steven N. Siegel 

Deputy General Counsel, NSLB 



[Counterintelligence/ 
Counter terror ism/Cyber] 



Attn: [UNIT] 



[REQUESTING OFFICE] Attn: 
[OFFICE OF ORIGIN] Attn: 



[DELIVERING DIVISION] Attn: 
(if using personal service) 



SSA [SQUAD SUPERVISOR] 
SA [CASE AGENT] . 

SA [CASE AGENT] 
[SQUAD] [X] 

SSA [SQUAD SUPERVISOR] 
[SQUAD] [X] 



From: [DRAFTING DIVISION] 

[APPROVING OFFICIAL] 

Contact: [CASE AGENT, 000-000-0000] 

Approved By: [ADIC NAME (IF APPLICABLE) ] 
[SAC NAME] 
[ASAC NAME] 
[CDC NAME] 
[SSA NAME] 

Drafted By: [LAST, FIRST, MIDDLE NAME: INITIALS] 

C T J) Case ID #: [CASE FILE NUMBER] (Pending) 

(TJ) Title: ^W" [SUBJECT] 

^ ■ [AKA] [ALIAS (IF APPLICABLE) ] 
[IT/FCI - FOREIGN POWER] 
CO: [OFFICE OF ORIGIN] 

Synopsis: (U) (NSLESI) Approves the issuance of an Electronic 
Communication Privacy Act (ECPA) National Security Letter (NSL) 
for email subscriber information; provides reporting data; and 
transmits the NSL to the appropriate division for delivery to the 
electronic communications service provider. 
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To: General Counsel From: [DRAFTING DIVISION] 
<U> Re: [CASE FILE NUMBER] , 00/00/2008 



(IT) 



DeolassifyOn^^fi^^fc^gSEs'^ased on 

inf ormati5ir~ifv--the EC] 

(U) [Full/Preliminary] Investigation Initiated: [00/00/2008] 

Reference: [CASE FILE NUMBER Serial XXX] 

Enclosure (s) : (U) Enclosed for [DELIVERING DIVISION or OFFICE 
OF ORIGIN, depending on whether service is personal or through a 
restricted delivery service or fax] is an NSL dated [00/00/20Q6T 
addressed to [COMPANY POC NAME] , [TITLE (if available)], [COMPANY 
NAME], [COMPANY ADDRESS - NO P.O. BOX], [CITY, STATE - NO ZIP 
CODE if using personal service], requesting the name, address, 
and length of service for the e-mail address holder (s) listed. 

Details.' Brlef explanati on Q f why the NSL is being created 



hlE -1 



(U) A [FULL/PRELIMINARY] [INTERNATIONAL/FOREIGN 

CC»UNTERINTELLIGENCE] investigation of the subject, a [USPER/NON- 
USPER] , was authorized in accordance with the Attorney General 
Guidelines because [Give a full explanation of the justification 
for opening and maintaining an investigation of the subject; 
barebones facts will not suffice and will cause the request to be 
rejected for lack of legal sufficiency] . This electronic 
subscriber information is being requested to [Fully state the 
relevance of the requested records to the investigation] . 

■>tf) Information is being sought on the following e- 

mail/lP address (es) [list the e-mail/IP address (es) or address 
holder (s) about whiah information is sought]. 

(U) This electronic communication documents the 
[APPROVING OFFICIAL'S] approval and certification of the enclosed 
NSL. For mandatory reporting purposes, the enclosed NSL seeks 
subscriber information on [NUMBER OF] [e-mail/IP address (es)] 
from [ISP #1]; [NUMBER OF] [e-mail/IP address (es) ] from [ISP #2], 

(D) Arrangements should be made with the electronic 
communication service provider to provide the records [personally 
to an employee of the DELIVERING division OR through use of a 
delxvery service or secure fax to OFFICE OF ORIGIN] within 
[NUMBER OF] business days of receipt of this request. The 
electronic communication service provider should neither send the 



ACLU-NSL-317 



5 

To: General Counsel From: [DRAFTING DIVISION] 
(U) Re: [CASE FILE NUMBER] , 00/00/2008 

records through routine mail service nor utilise the name of the 
subject of the request in any telephone calls to the FBI. 

DISCLOSURE PROVISIONS 

[Certification and Aotivation of the Nondisclosure Requirement: 
There is no longer an automatic prohibition that prevents the 
recipient of a National Security Letter from disclosing that the 
FBI has requested the information. To activate the nondisclosure 
requirement, the senior FBI official approving this EC must use 
Option 1 below and include in the EC (but not in the NSL) a brief 
statement of facts that justify the nondisclosure requirement. 
Option 2 is to be used in all cases where Option 1 is not used.] 

[Option 1 - Invoking Nondisclosure Requirement] 

(U) In accordance with 18 U.S. C. § 2709(c) I, the 
senior official approving this EC, certify that a disclosure of 
the fact that the FBI has sought or obtained access to the 
information sought by this letter may endanger the national 
security of the United States, interfere with a criminal, 
counterterrorism, or counterintelligence investigation, interfere 
with diplomatic relations, or endanger the life or physical safety 
of a person. 1 

£U5 - j4) Brief statement of the facts justifying my 

certification in this case: 

[Option 2 - Declining to invoke the nondisclosure requirement] 

(U) I, the senior official approving this EC, have 
determined that the facts of this case do not warrant activation 
of the nondisclosure requirements under the applicable National 
Security Letter statute. 

[Include the next 2 paragraphs in all ECsJ 

(U) Information received from an electronic 
communications service provider may be disseminated in accordance 
with the FBI's Domestic Investigations and Operations Guide 
(DIOG) , and with respect to dissemination to an agency of the 
United States, only if such information is clearly relevant to 
the authorized responsibilities of such' agency. 

3 
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To: General Counsel From: [DRAFTING DIVISION] 
(U) Res [CASE FILE NUMBER] , 00/00/2008 



(U) Any questions regarding the above can be directed 
to [CASE AGENT, telephone number (000) 000-0000] . 
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To: General Counsel From: [DRAFTING DIVISION] 
^) [CASE FILE NUMBER] , 00/00/2008 



LEAD (3): 

Set Lead 1 : (Action) 

GENERAL COUNSEL 

AT WASHINGTON. DC 

(U) NSLF is requested to record the appropriate 
information needed to fulfill the Congressional reporting 
requirements for NSLs. 

Set Lead 2: (Info) 

rCOUNTERINTELLIGENCE/COUNTERTEKRORISM/CYBERT 
AT WASHINGTON, DC 
(U) At [UNIT] read and clear. 
Set Lead 3: (Action) 

f DELIVERING DIVISION - if using personal service ! 
AT fCITY, STATE! • 

(U) Deliver the enclosed NSL as indicated above. Upon 
receipt of the information requested, [DELIVERING DIVISION] is 
requested to submit results to [DRAFTING DIVISION] and [OFFICE OF 
ORIGIN, if applicable] . 
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U.S. Department of Justice 
Federal Bureau of Investigation 



Wuhington, D. C. 20J35-0001 

[DRAFTING DIVISION] 
[STREET ADDRESS] 
[CITY, STATE, ZIP CODE] 
[MONTH, DAY, YEAR] 



[MR. /MRS. /MS. ] [Complete name] 
[TITLE, IF AVAILABLE] 
[NAME OF COMPANY] 

[PHYSICAL STREET ADDRESS - NO P.O. BOX] 
[CITY, STATE - NO ZIP CODE] 

Dear [MR . /MRS . /MS . ] [LAST NAME] : 

Under the authority of Executive Order 12333, dated 
December 4, 1981, and pursuant to Title 18, United States Code 
(U.S.C.), Section 2709 (Section 201 of the Electronic 
Communications Privacy Act of 1986} (as amended) , you are hereby 
directed to provide to the Federal Bureau of Investigation (FBI) 
all subscriber information, limited to name, address, and length 
of service, for all services provided to or accounts held by the 
named subscriber and/ or the subscriber of the named account. 

[provide either or both - 1) person <s) to whom the email/IP 
address (es) is/was registered and/or 2) the email/IP address (es) 

[NAME OF PERSON (S) ] 
[E-mail/IP ADDRESS (ES)] 

[RELEVANT TIME PERIOD] : [ON A SPECIFIC DATE] 
or 

[FOR THE PERIOD FROM [SPECIFIC DATE] TO [SPECIFIC DATE] 
or ' [PRESENT] ] 

If the time period noted above ia to the "present," 
that term is intended to direct production of information to the 
f at L° f . the Passing °f this letter. If providing information 
to the date of processing is not feasible, please provide 
information to the date of receipt of this letter. 

In accordance with Title 18, U.S.C., Section 2709(b) I 
•certify that the information sought is relevant to an authorized 
investigation to protect against international terrorism or 
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[MR7MRSJMS] [COMPLETE NAME] 



clandestine intelligence activities, and that such an 
investigation of a United States person is not conducted solely 
on the basis of activities protected by the First Amendment to 
the Constitution of the United States. 

[Certification: The nondisclosure requirement is not an automatic 
feature of the NSL. If the supporting EC for this NSL included 
Option 1 (Invoking the Nondisclosure Requirement) then include 
the language in the following 3 paragraphs in the NSL. J 

In accordance with 18 U.S.C. § 2709(c)(1), I certify 
that a disclosure of the fact that the FBI has sought or obtained 
access to the information sought by this letter may endanger the 
national security of the United States, Interfere with. a 
criminal, counterterrorism, or counterintelligence investigation, 
interfere with diplomatic relations, or endanger the life or 
physical safety of a person. Accordingly, 18 U.S.C. § 2709(c) (1) 
and (2) prohibits you, or any officer, employee, or agent of 
yours, from disclosing this letter, other than to those to whom 
disclosure is necessary to comply with the letter or to an 
attorney to obtain legal advice or legal assistance with respedt 
to this letter. 



In accordance with 18 U.S.C. § 2709(c) (3), you are 
directed to notify any persons to whom you have disclosed this 
letter that they are also subject to the nondisclosure 
requirement and are therefore also prohibited from disclosing the 
letter to anyone else. 

In accordance with 18 U.S.C. § 2709(c) (4), if the FBI 
asks for the information, you should identify any person to whom 
such disclosure has been made or to whom such disclosure will be 
made. In no instance- will you be required to identify any 
attorney to whom disclosure was made or will be made in order to 
obtain legal advice or legal assistance with respect to this 
letter. 

[Include the following language in all NSLs.] 

In accordance with 18 U.S.C. § 3511(a) and (b)(1), you 
have a right to challenge this letter if compliance would be 
unreasonable, oppressive, or otherwise unlawful. 

You also have the right to challenge the nondisclosure 
requirement set forth above. If you wish to make a disclosure 
that is prohibited by the nondisclosure requirement, you must 
notify the FBI, in writing, of your desire to do so within 10 
calendar days of receipt of this letter. That notice must be 
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[MJL/MRS./MS] [COMPLETE NAME] 



mailed or faxed to [the XXXX] Division, attention: CASE AGENT 
(phone number: xxxx) , with a copy to FBI HQ, attention: General 
Counsel (fax number: 202-324-5366) and must reference the date of 
the NSL and the identification number on the upper left corner of 
the NSL. If you send notice within 10 calendar days, the FBI 
will initiate judicial proceedings in approximately 30 days in 
order to demonstrate to a federal judge the need for 
nondisclosure and to obtain a judicial order requiring continued 
nondisclosure. The nondisclosure requirement will remain in 
effect unless and until there is a final court order holding that 
disclosure is permitted. 

If you do not send notice of your desire to disclose 
the NSL or the fact that you produced records in response to it 
within 10 calendar days of receipt, then the nondisclosure 
provision will remain in effect, subject to your opportunity to 
make an annual challenge to the nondisclosure requirement as 
provided by subsection 3511(b) . 

In accordance with 18 U.S.C. § 3511(c), an unlawful 
failure to comply with this letter, including any nondisclosure 
requirement, may result in the United States bringing an 
enforcement action. 

You are directed to provide records responsive to this 
letter [personally to a representative of the [DELIVERING 
DIVISION] OR through use of a delivery service to [OFFICE OF 
ORIGIN] OR through secure fax] within [xxxx] business days of 
receipt of this letter. 

Any questions you have regarding' this letter should be 
directed only to the [ [DELIVERING DIVISION] OR [OFFICE OF 
ORIGIN] , ^depending on whether service is personal or through a 
delivery service] . Due to security considerations, you should 
neither send the records through routine mail service nor non- 
secure fax, nor disclose the substance of this letter in any 
telephone conversation. ' 

Your cooperation in this matter is greatly appreciated. 

Sincerely yours, 



[ADIC/SAC NAME] 

[ASSISTANT DIRECTOR IN CHARGE/ 
SPECIAL AGENT IN CHARGE] 
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[MRJMRS./MS] [COMPLETE NAME) 



